put auth key in a separate file