typo in http response
security for callback only
simplified quick start application sample