doh! Well that explains it, I was hitting global unauthenticated.