Removed PW from redirectURL