fix oauth server flow params