Box just allowed http callback uris, so we don't need this hack anymore.