Fix $HOME and add --allow-unauthenticated