option to toggle require secure auth