Restrict private index.html