split between public and private authenticated pages. server based only