authenticate if always-auth is true
Release 1.1.0