fixed url parsing
added module.noxAuth to enable authorization checking for each callback
added query parameter ref to manually specify referer url for nox-client.js