optionally disable client auth in gizmo