callback URL moved to configuration