/documents should work for users who are not logged in