callback url docs correction

incorrectly showed it being passed as parameter to  authorize_url
instead of request_token