[misc] auth endpoint => www.inboxapp.com/...