Don't require authentication
Remove distinction between create and update
Change request handlers