serve default frontpage without session