UsersController shouldn't authenticate