If walking though your tutorial, it's easy to miss that enableAuth in your screenshot is set to false.

By setting it to false here, it can be explicitly set to true when dual auth is implemented in a later step