For creation and updating, I can see why you would want to authenticate and authorize users, but there should should still be a way to have the app go into a read only state if all I want to do is scan.