login page can no longer require authentication