ignore auth on server so that url method can be called on the server