Don't require session for attaching/deattaching users