properly formed URI, encoding customer_id, callback in request form