          """
          if api_settings.UNAUTHENTICATED_USER:
              user = api_settings.UNAUTHENTICATED_USER()
          else:
              user = None
  
          if api_settings.UNAUTHENTICATED_TOKEN:
              auth = api_settings.UNAUTHENTICATED_TOKEN()
          else:
              auth = None
 
</s> remove             user = api_settings.UNAUTHENTICATED_USER()
 </s> add             self._user = api_settings.UNAUTHENTICATED_USER() </s> remove             auth = api_settings.UNAUTHENTICATED_TOKEN()
 </s> add             self._auth = api_settings.UNAUTHENTICATED_TOKEN() </s> remove             auth = None

        return (None, user, auth)
 </s> add             self._auth = None </s> remove             self._authenticator, self._user, self._auth = self._authenticate()
 </s> add             self._authenticate()
            self._user = None
          """
          if api_settings.UNAUTHENTICATED_USER:
              user = api_settings.UNAUTHENTICATED_USER()
          else:
            self._user = None
  
          if api_settings.UNAUTHENTICATED_TOKEN:
              auth = api_settings.UNAUTHENTICATED_TOKEN()
          else:
              auth = None
keep keep keep keep replace keep keep keep keep keep
 request.user should be still be accessible in renderer context if authentication fails 
rest_framework/request.py