Close #30 - Commons authentication is optional, depending on whether "commons" object or "users" array is in the config