Reject the promise if the user isn't auth'd for a call that requires auth