make the initial redirection to the start page (either login or the app itself) and the nginx authorization gate depend on the --public-server option