fix missing redirect url in authentication token phase