d3.xml for status so that it works without auth