add different roots for un-/authenticated users