do not allow unauthenticated users to register for an activity