expose setting auth