Purge the last remaining use of /user/ as an auth url. I'm not sure how it got missed years ago.