fix authorization for records static files