oh sure - yeah you don't have to make it available without login, but that just means that users have to login when they click - but SSO probably gets around that? never used it