get redirect-uri correctly in authorization form

wrap-keyword-params converts redirect_uri to a keyword, so that's how it
should be accessed.