Is this request cachable?  If so it would be better to return NULL here, just in case this is ever used by authenticated users.  Probably never going to happen but best to change it for when someone copies this function for a publicly available json response?