removed authentication
removed admin protection