I have Matrix authentication turned on, with no access for anonymous. I am using the Simple Theme Plugin to skin the UI. This all is fine, except that when not logged in, Jenkins returns a 403 error on my css and js files in /userContent resulting in the default Jenkins appearance.

This page https://wiki.jenkins-ci.org/display/JENKINS/User+Content states:
"Note that these files are not subject to any access controls."

And, I can't figure out how to add my files to the whitelist.