set auth to false by default