updated authorize params to take code instead of hash

Signed-off-by: Chris Jones <chris@jonezy.org>