prevent download on serverside scripts