finished auth layer with a settings file