Serve static files with sendfile; remove authentication requirement for input links