Set the callback on authorization if given

We don't actually allow the callback to be set currently :exclamation: