only authenticated users can send messages