decoupled redirect_uri determination from express-lane