no need to authenticate every time