removing auth needed to get user list