changed auth endpoints