allow unauthenticated access from hosts other than localhost