updated auth urls