removed the login and auth requirements for paths