add some new hooks to bypass authentication on several contexts. close #12