redirect to authorized_apps_url in sessions_controller