fix authorize endpoint typo