Changes: Gets user record from authFunction
Changes: Checks for anonymous paths against incoming request