feature(config) disable username and password if auth unchecked