authorize collection

app/controllers/v1/collections_controller.rb

@@ -8,7 +8,7 @@ class V1::CollectionsController < ApplicationController
   include ::SubjectableController
   include ::StageableController
 
-  before_action :authenticate_user!, only: [:create, :update, :destroy]
+  before_action :authenticate_user!, except: [:create, :index, :show]
   before_action :set_collection, only: [:show, :update, :destroy, :add_object, :delete_object]
   before_action :set_new_collection, only: :index
   before_action :authorize!, except: [:create, :tagging, :untagging, :subjecting, :unsubjecting, :add_stages, :remove_stages]