add auth exception (public: true)