Move auth bits into production-config.