serve static assets directly