allow leading whitespace in json bodies
turn off auth logging by default