handles absence of auth credentials better