allow urls starting with /