Add always-auth

required for private registries