add auth session key as config option