no, see below, if we would use always auth here we could not do the below mentioned login-admin-create-new-user routine.