remove forced auth