Unauthenticated request on public resource