Unless I'm missing something, you would need to authenticate this request somehow.