Login server doesn't require client auth