use new endpoints for auth and public key auth method for non-users