unauthenticated users should not have more right than authenticated users