remove forced authentication for RSVPs controller