new nodebb user here, running v1.16.1 locally with redis. I can't figure out how to use the search api, keep getting denied:

• using the /admin/settings/api token i get 401 "A valid login session was not found.": curl -v -H 'Authentication: Bearer 633d1f38-8576-4ce1-bd2c-c799a474b763' -H 'Authorization: Bearer 633d1f38-8576-4ce1-bd2c-c799a474b763' 'localhost:4567/api/search?term=restless&in=categories&uid=2'
• using the write-api token i get 403 forbidden 'You are not authorised to make this call": curl -v -H 'Authentication: Bearer 053b0157-04b4-4bfa-b502-211be5a61e7d' -H 'Authorization: Bearer 053b0157-04b4-4bfa-b502-211be5a61e7d' 'localhost:4567/api/search?term=restless&in=categories&uid=1'

interestingly without the 'in=categories' it return 200 but no search results: curl -v -H 'Authentication: Bearer 053b0157-04b4-4bfa-b502-211be5a61e7d' -H 'Authorization: Bearer 053b0157-04b4-4bfa-b502-211be5a61e7d' 'localhost:4567/api/search?term=restless&uid=1'

So what's the correct way to use the search api? and why does it require a token at all? Is it possible to open the search api for non authenticated users and then search just the public categories?