removed authenticated checks from all functions in models.py