Open a huge hole in the API's security till I make some token generation and consumption mechanism