add location_allow/deny directives for alias and stub_status templates

alias and stub_status templates are missing location_allow/deny rules