redirect uris not required with bearer only