fix auth urls