non-logged in user may not go through all the same codepaths as a user with cookies present.