lol, Instead of making it public with out authentication . another way of earning money, they could have avoid spaming by only allow api acces through token from register user. so that they can track down and block user if such so. Thanks for the update BTW