  
          By default this will be (None, AnonymousUser, None).
          """
          if api_settings.UNAUTHENTICATED_USER:
              self._user = api_settings.UNAUTHENTICATED_USER()
          else:
              self._user = None
  
 
</s> remove             user = api_settings.UNAUTHENTICATED_USER()
 </s> add             self._user = api_settings.UNAUTHENTICATED_USER() </s> remove             user = None
 </s> add             self._user = None </s> remove             auth = api_settings.UNAUTHENTICATED_TOKEN()
 </s> add             self._auth = api_settings.UNAUTHENTICATED_TOKEN() </s> remove             auth = None

        return (None, user, auth)
 </s> add             self._auth = None </s> remove             self._authenticator, self._user, self._auth = self._authenticate()
 </s> add             self._authenticate()
        self._authenticator = None

  
          By default this will be (None, AnonymousUser, None).
          """
        self._authenticator = None

          if api_settings.UNAUTHENTICATED_USER:
              self._user = api_settings.UNAUTHENTICATED_USER()
          else:
              self._user = None
  
keep keep add keep keep keep keep keep
 request.user should be still be accessible in renderer context if authentication fails 
rest_framework/request.py