if api_require_authentication settings is false, anonymous users should be able to access the music without restriction