Fix authorize endpoint redirect to callback