Fix #243: fix auth for rpc and static files