make redirect_uri optional