allowAuthorizationOnRedirect