remove special case for 'authenticated user'