abs auth path