public routing works for logged out users