changed token return uri from fragments to parameters