now application may run with no authentication/authorization and no auditing