add bypass-waf.asp