remove auth as separate config