Sending through even not authenticated requests. They will just have other headers, so the targeted server can act accordingly.