add authentication requirement for static client pages