healthcheck should not use any configured auth (prevents auth redirects)