UK: update test
UK: xform.require_auth False by default