removed username/password authentication at authorization phase and temporarily made the redirectUri parameter mandatory