dont provide invalid django session key for anonymous requests, expect valid session key for auth api endpoint