removed redirect loop on index, auth on publish