update authorization url