ah! Thanks! I must have forgotten to remove it from the authenticated routes :/