Added ALLOW_UNSIGNED_REQUESTS setting to bypass request signer