auth_strategy set explicitely