allows access to session api routes without being logged in.. durr