Patch for old CWL auth module and rewrite rule for site update