added ability to pass parameters to authorize_url