pulled auth config variables out into separate config file