allow plaintext auth