change ms oauth endpoint to new spec