Chore/files get remove no user

now you can call files.get without being authenticated