Receiving both authenticated and unauthenticated requests, handling them differently, adding headers in the latter case.