set auth to true

some clients need the auth response to decide auth mechanism