I'm curious to hear why authentication is skipped for all the new and create actions.