Require client to have registered redirect_uri