make auth optional and remove supervisor