change redirect_uri validation for token