fix: building auth_url