ui: static files served with middleware