Remove session tokens from the redirect URLs