allow riak_control.auth = off, for non-SSL riak_control goodness

as reported by @hectcastro