fix URLtools in Auth