allow login, index, demo without logging in