set the requires_authentication preference to false for running the backend specs

it's safe to do this since the requires_authentication is tested correctly
in the api specs.