auth not necessary