avoid sending authentication token when it's not needed, to skip
additional query on server side to check user credentials