don't hardcode redirect uris