cleanup some unused code. added logging about authentication settings at startup. prevent startup if auth is enabled but user/pass not set