skip auth for query json