add config/auth.js to ignore list