Encode auth data server side now. Remove protocol from external links.