Allow using css and images without authentication