add DisableAuth param in config