fix config.js location, default auth host better