Token setting defaults when added or revoked, default redirect_url