remove auth for messages show