change log level of notice when no authorizer is configured, close #291