hacks to allow an application to have any grant type, optional appended slash on token and authorize endpoint urls