That's what I'm led to believe too, the dispatcher alone can't server pages if it's not allowed from publisher. For the purposes of pushing the work forward, I'm going to serve the publisher pages without requiring authentication and if any follow-up to the original question comes up I can try it in...