Progress with authentication - disabled security for /assets/**