fix auth config