Web flow authorize_url helper
Tweak spec for authorize_url