Minor fixes to web auth flow to match GDC's JSON format