improved unauthenticated user actions