Check for matching hostname before doing end-of-oauth redirect