simplify permission check
DRY authentication enabled check
allow AUTH when not enabled in nsqd