remove auth requirement for index endpoint