add STS endpoint for Auth