The URL of the provider's authentication server, to exchange an authorization code for an access token.