add global AUTH_REQUIRED setting