changed default root, require user sign-in for testclient/client