each target can have a target with a static path. the static path
is excluded from the jwt authentication check
why do we need this?
It is useful for images, videos or similar which should  be displayed
in the browser with the img or video tag

please use unique names for the files with ids (uuids) which shouldn't have
increasing names