add insecure mode and oauth id endpoint to config