Fixed auth and routing for getting server files