App auth credentials moved to config parameter