Reproduction:

1. successfully login to Web UI
2. destroy ticket (if SSO is used)
3. wait for a session to expire
4. do some action requiring communication with server
5. login dialog with incorrect link to browser configuration page is shown

Note:
Correct link is shown before successful login to Web UI so practically the bug affects only users using forms based authentication.

Cause:
Typo in ipa_init.json and internal.py. It's supposed to use a curly bracket:
{{{ http://${host]/ipa/config/unauthorized.html }}}