updated auth url