commented out access control on browser js