more work on non sasl auth