Update to only use eppa if it's provided in the headers

app/__init__.py

@@ -71,11 +71,12 @@ def create_app(config_name):
             "redir", app_vars.default_referrer
         )
 
-        if not any(item in session["user"].get("eppa") for item in valid_eppa):
-            return render_template(
-                "account/unauthorized.html",
-                unauthorized_msg=messages.unauthorized_message,
-            )
+        if 'eppa' in request.headers:
+            if not any(item in session["user"].get("eppa") for item in valid_eppa):
+                return render_template(
+                    "account/unauthorized.html",
+                    unauthorized_msg=messages.unauthorized_message,
+                )
 
         if rc_util.check_state(session["user"].get("username")) == "hold":
             return render_template(