fixed oauth redirect