can accept auth without password