force authentication and remove root static route