Do not require login for /update