Perhaps offer to take the homepage or another page of their choosing - and send them code (ie in a text file for instance). then they can see what is up without having to access your site.

it is better than giving someone access to your host - which I would not do until there was trust.