Add constants for URLS (to be able to change it in one place)
Fix auth. Location should have full URL.