fixed auth strategy defaults to allow null to work
Release 0.4.1