> I'm not sure where to put the auth.conf file.
Nowhere. You don't need it. At the server side, only login-config.xml is used.
I don't recall where to put the users.properties file, but if you try a few of the following, i'm confident you'll get it running:
I checked: users.properties goes in the conf directory