added test for routing to make sure we don't get redirected to auth when accessing javascript files