do not authenticate PointsController index or show actions