$ curl -k https://dev02.canopy.link/api/device/17f5d52b-dba1-4a21-a009-a5a19a168cc8 Works even if not authenticated. Major security hole!