changed PATHS loading schemes to cope with the json paths. also unhardcoded authfile