OAuth: parameterize the redirect host