change auth() to use preauth() and add auth.nopreauth()
0.4.0