removed type=web_server from the authorization url