refactor uri routes
refactor authorization code