missing backslash at beginning of auth callback