I looked at using mod_rewrite rules to solve the problem, but I still need to use C::A::Plugin::Authentication to authenticate users, even for the ststic pages.

Thanks for the pointer to that sample. It is a great example of using mod_rewrite.