fixed stash oauth url paths