diff --git a/zefie_wtvp_minisrv/includes/config.json b/zefie_wtvp_minisrv/includes/config.json
index 3e18cd92..b3dfdf23 100644
--- a/zefie_wtvp_minisrv/includes/config.json
+++ b/zefie_wtvp_minisrv/includes/config.json
@@ -82,6 +82,7 @@
     "lockdownWhitelist": [
       // urls the client can access without being "logged in"
       "wtv-1800:/preregister",
+      "wtv-1800:/noflash",
       "wtv-head-waiter:/login",
       "wtv-head-waiter:/ValidateLogin",
       "wtv-head-waiter:/login-stage-two",