Don't enforce user logins for user management api