Set /api root auth to false