auth is optional, make it so