minor callback_phase clean up
refactoring ALL auth_request URL generation into AuthRequest class