update authorize and token endpoints