removed hard coded redirect_uri