added ability for projects to opt-out of authentication (for ticket #17)