authentication was not being required