return full url in login/logout links
pass authToken on successfull authentication
fix mongo between dates bug