har coded client_id + redirect_uri