updated strategy to allow callbackURL to be a function