fixing security context to force authentication before going anywhere