configuration file, authentication improvements