update build environment
allow routes that don't require login
refix