Denote that a request needs/doesn't need auth