fixed access controls so peers cannot make requests to page servers (except the OPEN request to the worker editor)