Noting that there's an option to require a Bearer token to the API