Don't require a user to sign in before authorising request