update Authorization callback URL