- refactored auth to be part of the builder rather than configured externally