docs updates

I think this is actually a required URL now... which brings up the question of why we need a non-authenticated URL