box authorization back button