You need to ensure that all users from the Internet are pre-authenticated before they can access App1