/services doesn't require authentication