adding support for autologin to generate a unique one-use url