Yes the error is also reproducable by me in unauthenticated state.
I think it would be better to deactivate the Message-Icon because in unauthenticated state it makes no sense... 
Another option may be an autorouting to the authentication site or at least a messege like "error - you're not authenticated".
I think the priority is low because nearly no function of project-gc is available without authentication.