cleans up redirect URI validation