added an expected url parameter to the server's verify method, and modified the example app accordingly