Add noauth for all collection handlers