write out an auth file if it's absent