Auth string not present in URL