API is working without auth!