implement non-authenticated default status