Exclude /static/ from authentication requirements

Login page now has css and js