fix(auth): set user href to apiary