about page doesn't need authentication