add robots.txt to stop robots trying to go through auth flows