no need for authentication for static resources