fixed redirect url for oauth