Requiring any user role is the same as requiring user to be authenticated, so these checks were unnecessary.