open external browser for request authz code