allow users to be created w/o authentication