use static files after login/logout middleware