allow unauthenticated user to use query functions.