Return the auth URL instead of redirecting.