block access to anyone but layar and local dev