if ($self->param('RESTRICTED')) { return _no_auth() unless defined($ENV{UserName}); }