removed require user authentication