removed some auth requirements