on-premise: make oauth redirect url more clear