remove the is_authenticated check