blocking access from web and making cred file