Allowing auth to be optional based on app config