there are things dont need auth