Looking for unauthenticated endpoints