disable auth for rest api