removed redirect_uri from request_phase params