always initialise auth type and settings