update web auth paths and referral links