db upgrade no longer requires auth