allow access to /works
allow access to /works