removing auth for reports controller