abstracted authorize url into token class