force app AUTHENT if not defined (refs #3463)