refactor opening authorisation URL