docs reference 'auth.model' in config