static dir is login only