Make authUrl() accept optional response_type.