Bugfix: apps have redirect URIs, not tokens.