Correct xpath for app authorization