deny all request on the application directory
deny all request on the application directory