still need 'redirect_url' in the first gbm response