Obviously we load the callback URL from one of two sources at the beginning of step 6, so we wouldn't ever use the callback url in the wisp. I thought I tested this, but that's what you get for thinking.