support noauth

Hopefully this patch is unintrusive enough