added config package
updated vars and README.md
added authentication middleware