allowed plugin auth for signed in users