by default we should now auth reads.
Merge pull request #12 from npm/auth-fetch

by default we should now auth reads