          else:
              user = None
  
          if api_settings.UNAUTHENTICATED_TOKEN:
              auth = api_settings.UNAUTHENTICATED_TOKEN()
          else:
              auth = None
  
          return (None, user, auth)
  
 
</s> remove             auth = None

        return (None, user, auth)
 </s> add             self._auth = None </s> remove             user = None
 </s> add             self._user = None </s> remove             user = api_settings.UNAUTHENTICATED_USER()
 </s> add             self._user = api_settings.UNAUTHENTICATED_USER() </s> remove                 user, auth = user_auth_tuple
                return (authenticator, user, auth)
        return self._not_authenticated()
 </s> add                 self._authenticator = authenticator
                self._user, self._auth = user_auth_tuple
                return

        self._not_authenticated()
            self._auth = api_settings.UNAUTHENTICATED_TOKEN()
          else:
              user = None
  
          if api_settings.UNAUTHENTICATED_TOKEN:
            self._auth = api_settings.UNAUTHENTICATED_TOKEN()
          else:
              auth = None
  
          return (None, user, auth)
  
keep keep keep keep replace keep keep keep keep keep
 request.user should be still be accessible in renderer context if authentication fails 
rest_framework/request.py