Use app.sign_*_url instead of auth_server.sign_*_url