What about making all the GET requests public. These information are available via the website anyway.