suppress query string auth, ensure servestatic should be false not removed...