default options.auth to false