[fixed] force downcase callback_url to redirect_uri