enable authentication by default