auth setting.rb