corrected callback example

incorrectly showed it being passed as parameter to  authorize_url
instead of request_token