Fix OAuth endpoint - hardcode production URL for now.

Will need to switch this based on another ENV to make it easier to
develop, support staging etc.