add auth support
fix cluster default vars when false
add management callout