getting ready for unauthorized requests