do not require automatic auth on some requests