changed deny method to requestfiltering (like .config)