add a trace option for outputting full req/res for debugging on user-auth only