Allow unauthenticated call to `stations`

And remove trailing newline from stream urls in output of `stations`