rename config authorization to authentication