Simple, secure redirect-uri check with wildcard support for consulate