issue #3: make random auth the default