added config-vars for auth