saving auth url locally to prevent subsequent xhr calls (if needed)