no need to password protect the community endpoint
enable jsonp for endpoint