Fix str_replace in getAuthenticatedURL to correctly replace "/" and "+" characters

str_replace syntax was backwards