removed default from required authentication