Refactoring so that the redirect to COOP starts always at TopCluck's /coop/authorize/start, which calculates the redirect

This will make it easier to start the auth process for the purposes of single-sign on