no auth on settings index