In tutorial, it's easy to miss that enableAuth in your screenshot is set to false

By setting it to false here, it can be explicitly set to true when dual auth is implemented in a later step