add auth manager, auth config; rework front controller error handler