make the config checkAuth match the docs and the guard in index.js

small change so that people (like me) set the right property for enabling authentication.