secured static content BREAKS API bumping version

adding security middleware with extra (version breaking) private
parameter in the api enabling authenticated access to private static
ctnt