allow auth as an option for the client