using external plist file for auth in starting app