Is there handling for the case when the authority URL ends with "/"? E.g. "https://login.windows.net/". This may have been handled by the callers - it is difficult to determine in the code review UI.