path for mobile/chrome extension auth