Fix uri validation to allow application specific redirect_uri