With no auth token, we are not sure if users exist