fix(auth): make api home visible without auth