auth: correct URL used to get auth token

I must somehow have been testing using a locally modified version of
the file.