compatibility 2.3, new config to disable auth, hide invisible user