No issue with this step, but it might be worth seeing if you can tighten up the language.  Maybe something like

Then I should see unauthenticated user content