disabled auth for testing