unnecessary ensureAuthenticated