remove authentication from goods controller