update config / refacter its parsing
fix auth / token passing