serve static files but can disable