Allow unauthenticated users to pass through. It's upto the client of this library to prevent
users from seeing unauthorized data by using `user.is_authenticated` method