allow Pundit option when no authentication is chosen (fixes #310)