rest service without authentification