remove auth for messages index