assume disable-authentication=false when a username is specified on the command-line
fixed memleak
fixed segfault
updated CHANGELOG