Allow authorization_endpoint to be manually specified