rework reject_non_auth