try setting redirect_uri