Can end-users access content and external links in pre-authentication mode?