Allow unauthenticated calls to the APi