basic framework for authentication flow with sample config file