allow all to access GetCapabilities