fix webserver permissions, refs #4669