first files
server with a default response in the auth method