Don't require auth on /data.json