Return AuthUrl instead of Redirect to AuthUrl