auth token file is now specified in the config