added notes about redirect_uri