raise error when unauthed