everything but authentication and logout