adjusted OAuth redirects flow