files can be viewed without login