fix #60 - authentication required by default