using per-application grant_url
fixed getting grant_url from application