fix authentication url