fix some issues with pushstate

* when authorizing, don't enable push state so that auth can work as expected
* pass in `trigger: true` to `navigate()` so that the router refreshes the views