hybrid auth config