removed .json from auth calls; fix port in .env.development