Allow requests on root folder for authenticated users