Added force_login support to authorize/authenticate

Added support for the force_login parameter in the authorize and
authenticate URLs, via getAuthorizeURL's third parameter. Optional,
defaults to false.