send_alert doesn't need auth