title: Rails API authentication without requiring login
body: <p>I have a site where I have lists of generic items. I am fetching these lists on my front-end via axios requests to my rails API. (I am fetching in Redux actions)</p>
  
  <p>I'm using Active Model Serializer and so the JSON format of my data can be gathered simply by visiting the url "<a href="http://localhost:3000/items" rel="nofollow noreferrer">http://localhost:3000/items</a>" (the JSON is automatically set to render via my controller)</p>
  
  <p>I want to restrict access to the API, but still display these lists of items on my site for all users regardless of whether or not they are logged in.</p>
  
  <p>Is there a way to protect this data without requiring a login while still fetching it on the front end?</p>