diff --git a/src/main.rs b/src/main.rs
index 01686ec..1a76a6b 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -13,8 +13,6 @@ async fn main() {
     let state = Arc::new(auth::AppState::new());
 
     let protected = Router::new()
-        .route("/stats", get(routes::stats::get_stats))
-        .route("/power", get(routes::power::get_power))
         .route("/power/{device}/on", post(routes::power::power_on))
         .route("/power/{device}/off", post(routes::power::power_off))
         .route(
@@ -39,6 +37,8 @@ async fn main() {
 
     let app = Router::new()
         .route("/", get(|| async { Redirect::permanent("/stats") }))
+        .route("/stats", get(routes::stats::get_stats))
+        .route("/power", get(routes::power::get_power))
         .route("/auth/login", post(auth::post_login))
         .route("/auth/verify", post(auth::post_verify))
         .route("/auth/register/start", post(auth::post_register_start))