Changes to GET /oauth/authorize