added basic config file
added some more config options
fixed typo
Added attempt logic in auth controller

We now take all the config flags into consideration when trying to sign
in
tmp