support the --noauth_local_webserver flag