fix cookieinject, add replacing host-dependency to loginurl
loginurl with redirect, but oauth token is not working