remove authentication from controller, we want to let users perform as much actions as possible without the need to get logged.