Some uses of OAuth2 make use of string tokens or the callbackURL.  These should not be parsed as if they were actual URLs.  This change provides a way to avoid the URL parsing by checking for a "parseCallbackURL" configuration option.  By default this option is true, which maintains backward compatibility.