Fix auth url in app.js