fix static file routing point
fix user auth