change to a more sensible AuthIdentifier default if no config is set