CE-127 Make tracking API accessible without being logged in