tidy static file config, auth error handling