skip authentication for static pages