Respect the auth.model config