refactoring ALL auth_request URL generation into AuthRequest class