allowing authentication to accompany GET requests