CORE-5546: the redirect URI no longer needs to be sent to the callback service, but the state does