+ non secured resources with public access (css, etc)
fixed security, now only particular resources are exposed to non-
authorized users