added ability to set authorization url