While it's not required to Authenticated on the gateway it could be a nice feature to add additional security. You SHOULD always authenticate on the service(s).