Fix intrusive authentication requirement

**As a** developer 
**Given** a _PostsController_ which does not require authentication
**And** a _PrivatePostsController_ which does require authentication 
**And** I have installed _SimpleTokenAuthentication_
**When** I request _posts_ 
**Then** I should not be required to authenticate 
**But** now I am

**When** I request _private posts_, on the other hand
**Then** I should be required to authenticate 
**And** that should keep working as it is