fix #2820: OC search no longer working without authorization