Thanks for the feedback. changed the user guide to: " When you restrict access to files, please note that you need to allow external access to the following files: piwik.php, piwik.js, and also to the URL index.php?module=CoreAdminHome&action=optOut (for the opt-out iframe)."