check redirect_uri only if response_type=token