user config options
added spec for auth methods