disable auth for testing