intercept non admin / non authenticated