small security fix to prevent server files from getting send to client if requestes manually