User controllable flag to enable/disable reposistory authorization

When not enabled backwards compatible with old version