uim auth endpoint fixed