Better security setup. Though the root request is still secured which I
don't want it to be.