fix link to sponge auth