fixed static files, allow, and started login