css and js files should not get redirected to authentication