Protecting access to folders in web applications