minor update to callback url for oauth