move authSource and authMechanism to options