Made /api/provision anonymous