PLD: use default auth classes, closes #614