Allow * in redirect_uri