do not require authentication for root redirect