QUGC-37 reject unauthenticated requests