don't allow any messages except 'wiki' to be used until authenticated