fixed for new authcallback url