add config for authentication