Don't auth user on api calls