Authentication is optional to check for unprotected pages Require authentication once it is determined the pathname is covered by a protected page