make the config checkAuth match the docs and the guard in index.js