don't authenticate the frontpage