Enable authorisation by default