fixed authentication for destroy-all-user-dbs