removed redirect_uri check
used redirect_uri from authorize-request as redirect (introduced vulnerability for open redirect attack)