Allow arbitrary params for some endpoints

authentication