global auth config, and a facade for the Auth package