auth: using correct oauth redirect url