Not only that, but authentication is much harder than it needs to be to set up (and is off by default).