unauth handle