removed Open auth mech from incoming config