if ENV['user'] empty lets turn off auth