another way to build callback url for oauth