fix:auth-url var in html