REST authorization URL constant