Clean up settings

Settings doesn't need to be global. We just need them in the auth_*
functions.