you can configure this with a own config.ini

allow_public_update_access
set allow_public_update_access=1 for allowing public access for /update (anybody can access and start the update job).