switched from resource URI to OIDC client id