Nope, authorize is not supposed to do what this comment says. It's only supposed to spawn the UI, and it's up to the connector to handle stashing the authorization token somewhere.