handle requests with no auth headers

when `auth(this)` returns undefined