Surface the authorize URL to the user.
Called once, immediately after the URL is built and before the
callback wait begins. opened_in_browser is whether we already
invoked webbrowser.open successfully — false means the user has
to copy the URL manually.
