support dynamic callback urls for all clients, not just CasClient