authentication url set as env variable