switches from deprecated unauthenticated_userid(request) to request.unauthenticated_userid
fixes deprecation warning for pyramid >= 1.5