allow larger uploads. exlude access to wp-admin