x_t parameter not needed for authentication url