change file structure
add access_denied handler