Don't require auth middlewares if not taking advantage of instances
Merge remote-tracking branch 'james/user'