Move auth into config