allow posting to overwrite a file, restricted to localhost