Allow application-only search if not authenticated