separate aacExtURL property for the authentication redirect