lock down the web site