diff --git a/src/main/java/eu/m724/mstats/Startup.java b/src/main/java/eu/m724/mstats/Startup.java
index e7c4bde..c5e2507 100644
--- a/src/main/java/eu/m724/mstats/Startup.java
+++ b/src/main/java/eu/m724/mstats/Startup.java
@@ -1,14 +1,17 @@
 package eu.m724.mstats;
 
 import eu.m724.mstats.api.service.PluginService;
+import eu.m724.mstats.auth.AuthService;
 import eu.m724.mstats.orm.PluginVersion;
 import eu.m724.mstats.orm.Server;
 import io.quarkus.logging.Log;
 import io.quarkus.runtime.StartupEvent;
 import io.quarkus.scheduler.Scheduled;
+import io.smallrye.config.inject.ConfigProducer;
 import jakarta.enterprise.event.Observes;
 import jakarta.inject.Inject;
 import jakarta.transaction.Transactional;
+import org.eclipse.microprofile.config.ConfigProvider;
 import org.jboss.logging.Logger;
 
 import java.time.LocalDateTime;
@@ -17,8 +20,11 @@ public class Startup {
     @Inject
     PluginService pluginService;
 
-    public void onStartup(@Observes StartupEvent event) {
+    @Inject
+    AuthService authService;
 
+    public void onStartup(@Observes StartupEvent event) {
+        authService.init();
     }
 
     // TODO move to a more appropriate class
diff --git a/src/main/java/eu/m724/mstats/auth/AuthService.java b/src/main/java/eu/m724/mstats/auth/AuthService.java
index 25f04c9..3e04f2a 100644
--- a/src/main/java/eu/m724/mstats/auth/AuthService.java
+++ b/src/main/java/eu/m724/mstats/auth/AuthService.java
@@ -1,13 +1,19 @@
 package eu.m724.mstats.auth;
 
 import eu.m724.mstats.orm.Server;
+import io.quarkus.logging.Log;
 import jakarta.enterprise.context.ApplicationScoped;
 import jakarta.transaction.Transactional;
+import org.eclipse.microprofile.config.ConfigProvider;
 
 import java.util.Base64;
+import java.util.Optional;
+import java.util.concurrent.ThreadLocalRandom;
 
 @ApplicationScoped
 public class AuthService {
+    private String adminToken;
+
     @Transactional
     Server getServerByToken(String encoded) {
         try {
@@ -17,4 +23,23 @@ public class AuthService {
             return null;
         }
     }
+
+    public void init() {
+        Optional<String> configuredToken = ConfigProvider.getConfig().getOptionalValue("mstats.admin.token", String.class);
+
+        if (configuredToken.isEmpty()) {
+            byte[] bytes = new byte[32];
+            ThreadLocalRandom.current().nextBytes(bytes);
+
+            this.adminToken = Base64.getEncoder().encodeToString(bytes);
+        } else {
+            this.adminToken = configuredToken.get();
+        }
+
+        Log.infof("Admin token: %s", this.adminToken);
+    }
+
+    String getAdminToken() {
+        return this.adminToken;
+    }
 }
diff --git a/src/main/java/eu/m724/mstats/auth/MyHttpAuthenticationMechanism.java b/src/main/java/eu/m724/mstats/auth/MyHttpAuthenticationMechanism.java
index 08924dc..bf41bbb 100644
--- a/src/main/java/eu/m724/mstats/auth/MyHttpAuthenticationMechanism.java
+++ b/src/main/java/eu/m724/mstats/auth/MyHttpAuthenticationMechanism.java
@@ -15,11 +15,7 @@ import jakarta.annotation.Priority;
 import jakarta.enterprise.context.ApplicationScoped;
 import jakarta.enterprise.inject.Alternative;
 import jakarta.inject.Inject;
-import org.eclipse.microprofile.config.ConfigProvider;
 
-import java.util.Base64;
-import java.util.Optional;
-import java.util.concurrent.ThreadLocalRandom;
 import java.util.function.Supplier;
 
 @Alternative
@@ -29,30 +25,13 @@ public class MyHttpAuthenticationMechanism implements HttpAuthenticationMechanis
     @Inject
     AuthService authService;
 
-    private final String adminToken;
-
-    public MyHttpAuthenticationMechanism() {
-        Optional<String> configuredToken = ConfigProvider.getConfig().getOptionalValue("database.name", String.class);
-
-        if (configuredToken.isEmpty()) {
-            byte[] bytes = new byte[32];
-            ThreadLocalRandom.current().nextBytes(bytes);
-
-            this.adminToken = Base64.getEncoder().encodeToString(bytes);
-        } else {
-            this.adminToken = configuredToken.get();
-        }
-
-        Log.infof("Admin token: %s", this.adminToken);
-    }
-
     @Override
     public Uni<SecurityIdentity> authenticate(RoutingContext context, IdentityProviderManager identityProviderManager) {
         return Uni.createFrom().item((Supplier<SecurityIdentity>) () -> {
             String serverTokenEncoded = context.request().getHeader("X-Server-Token");
 
             if (serverTokenEncoded != null) {
-                if (serverTokenEncoded.equals(this.adminToken)) {
+                if (serverTokenEncoded.equals(authService.getAdminToken())) {
                     return QuarkusSecurityIdentity.builder()
                             .setPrincipal(new QuarkusPrincipal("Administrator"))
                             .addRole("admin")