Make sure the nested resources are authenticated