[auth] [minor] initalize auth.setup to false