only reauth before get if not already authed by session