authenticate via UUID for anonymous users