fix authentication url and token url  and user profile