more auth configuration