pass through auth parameters, add tls flag