added authenticated root_path