config and auth fixes