Changed to use the new authenticate url instead of authorize

This has the benefit to avoid the authorize screen when the user already authorized the application.
I believe it's more standard and should be the default.