Fixed missing authentication check on /