allow no redirect_uri to support cross-client exchange request