Role check on unauthenticated user should not error out