unauthenticated participants can't login