static checking of redirect_uri
add testcases