Manager UI - don't require authentication to fetch UI resources

Right now everything in the UI is protected. We should probably only protect the index.html and the servlets. The CSS, JS, and images can be served without requiring auth.