add exception if post without auth