Order's API order_status_url page asking for authentication

There was a recent change related to this - do you have L2 access to protected data?