[FIX] web: it's better if the route allowing users to log in is accessible without being logged in.