Make entire web dir pennkey protected to fix redir issues on login