handling when the user is not authenticated