oh, and add requireAuth: false to it