glass/listing/:id route does not require authorization