Currently, authentication is required for every HTTP request.
We could, instead, only require authentication for non-safe HTTP-request, ie. PUT, POST and DELETE. This would allow people to browse the web service and read the documentation, so they can find out if it would be interesting to them.