Auth secret moved to config file