handle non-authenticated access to restricted resources