move pil part to dev.cfg, fix db url
define auth impl