*) move the auth secret to the .ini files