fix auth url