changed authorize_url to '/oauth/authorize'

the staffomatic fronted is now able to handle authorizations