Allow unauthorized GET requests
Oops, test was so wrong