logged in requests were being treated as anon, causing major havoc