Decode the URL before checking the callback param.