this is no longer the hostname now, but `data-login-url`, best to make sure it stays named correctly