allow setting authorised/configured/authenticated before loading done

ApplicationConfig only created when needed

resolver(global ref)