fixed OAuth url resolution