cleaned up confusing route and correct urls in the auth doc