[BUG] Authentication bypass

[dlopez]

When you are not logged in. If you go to any route that doesn't exist. https://example.com/abc123. The backend view still loads.

This allows an unauthenticated user to download the truststore, or generate ATAK/ITAK QR codes.

[brian7704]

Thanks for pointing this out. I just tried it and you're correct that the UI shows up as if you're logged in. I'll work on a fix that shows a proper 404 page instead. However when I tried to generate QR codes I got the appropriate error about not being logged in. If you were able to successfully generate a QR despite being logged out please post your opentakserver.log file and I'll fix it ASAP.

As for the truststore, it is purposely downloadable while logged out. The truststore is a public key that users need if the server's certificates are self-signed. While I'm no expert on cryptography, it should be fine to allow non-logged in users to download the truststore since it's a public key.