This is wrong. It has to use ``normalizeUrl`` to support the case of authorization url containing a query string already