Deny direct access to json files