the setting is badly named: you use config.monitor to set authentication on the dashboard...