allow anonymous api access for open projects