I think that one option is to override the implementation of getAuthorisationRedirectURL, right? any other way? UPDATE #1: even overriding seems not working. The browser keeps encoding special chars...