disable possibility for unauthenticated renders