Add DefaultAuthMethod for user auth decision making, factored out config
creation