Fix auth handling when editor moved from default path

[knolleary]

The recent change to make the callback urls relative to the current domain didn't take into account if the editor had been moved away from the default / path.

This fixes that by extracting the path component of baseURL and prepending it to the callback path.