redirect GET /authorization