title: Having same route require and not authentication?
body: <p>I have doubt regarding my RESTful or general API solution.</p>
  <p>So, the case is that I need to serve same resource but in public and private manner. Meaning, that <em>GET api/products?private=true</em> will return products owned by current user and require authentication, and <em>GET api/products?private=true</em> will return all products without authentication.</p>
  <p>I understand that this is bad practice, but would like to hear your opinion.</p>
  <p>Thank you</p>