apended web config with access control