Removing auth for PUT calls as they are not public facing ones, and only internally accessible for controllers