separate config for experimenting with user auth