added links to two auth-loop issues