So authentication is required, but it's possible to login as ""?