[fix] proper auth via config