graceful errors for non-auth users