Cant speak for everyone, but no username and password required at our school. I setup permission for the SMTP server to allow outgoing email from authenticated users. As far as im aware, this is a very common option on mail servers. Infact needed for so many other applications we use for automated reports and notification. Have you found a problem with using authenticated users access with your application?