auth2 config complete per https://coderwall.com/p/bsfitw