fix unauthenticated routing