fixes merging of parameters in Authorize Controller so that redirect_uri doesn't get missed