Allow listing users without authentication