Or just use a cp_provider.get_no_auth_cp() since the root resource doesn't require auth.