fix authorization url