I wanted to leave it up to the main repo to decide if it wants to allow users to make requests without being logged in. Maybe this comment is misleading. Do you think I need to be making sure they are actually logged in?