How to allow both authenticated & unauthenticated access to an API - View it on GitHub