+1, this is also how I do it.

Maybe one remark that could potentially make it even clearer - renaming the "static" folder into "private" or something similar -- "static" is usually content which is served publicly. That would better match the actual use of that folder.