update default authorize and token url