private boolean isAuthenticationRequired(HttpServletRequest request) {
   return (!pxtDelegate.isPxtSessionKeyValid(request)
       || pxtDelegate.isPxtSessionExpired(request)
       || pxtDelegate.getWebUserId(request) == null);
 }