add disabling of auth
update README