now makes requests without authenticating to a specific user, just app itself