make auth provider configurable (wip)