added no-auth option