set redirect_uri to window.location.origin