Added a mode to the Auth plugin so it can be open or protected by default