make no authentication the default