altered candlepin /status API to be called without credentials