Rep 1388 Updated Auth-z 

Now fulfills the contract implied by the config