/auth?only=public