proof of concept of handling unauthenticated access works!