Use HTTPS & new client id & Don't use localhost as the redirect