streamserver: use internal setting for authentication