fixed auth_url hash bug