clarified the use of the Opauth callback URL