allow reauth code to use default credentials