turning off AUTH