test for default disabled auth checkpoint