use config.host for redirect_uri