made backdoor page dynamic so it works where ever it is deployed
fixed adding baseDomain into return URL