you don't even need to authenticate