remove AuthToken (use session). Remove login() call. Use AccessPolicu object to set public read permission
remove AuthToken (use session). Remove login() call. Use AccessPolicu object to set public read permission