> Why should we force some one to use auth?

That was my thinking as well, that is why this is part of an event listener that can be removed and/or supplemented. I tried to make this as configurable as possible while maintaining the existing conventions. `if (this.configuration && this.configuration.auth)` would at least be consistent with the convention, I will change that.