abs urls for auth.js hack